Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
fc863f0b945a55b723f37393db2c16a2_JaffaCakes118.exe
Resource
win7-20240903-en
Target
fc863f0b945a55b723f37393db2c16a2_JaffaCakes118
Size
381KB
MD5
fc863f0b945a55b723f37393db2c16a2
SHA1
a1a09475fab1cd2389f0fa8d0a0e5d6ce4aa41a3
SHA256
529713e78cafb285896716c7a0a111bd7bb2bb6db96cfd4bc7375945790aaef1
SHA512
e56b36b2b24920ee62744d8d9d03ad488cc7c0ad37909f3f9c9c50e6c6b7eb8ac927e1785983b27d234d62856bc33b89ae797d94cdba92dc34e3e2522e9694d7
SSDEEP
6144:Ufxjxvjpe238JMJRMVkvkcyc65DECBe2UQB343iTYOGQKnO+3sxbOsZ:UfnbsJiRQf9VnBe2U8ISUZQB+3sxbXZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ